Question 1

Which three Orchestrator types are supported when deploying Defender? (Choose three.)

Options :

A : Red Hat OpenShift

B : Amazon ECS

C : Docker Swarm

D : Azure ACS

E : Kubernetes

Answer: A,B,E

Question 2

Which action would be applicable after enabling anomalous compute provisioning?

Options :

A : It detects the activity caused by the spambot.

B : It detects unusual server port activity or unusual protocol activity from a client within or outside thecloud environment.

C : It detects potential creation of an unauthorized network of compute instances with AutoFocus.

D : It detects potential creation of an unauthorized network of compute instances either accidentally or forcryptojacking.

Answer: D

Question 3

You have onboarded a public cloud account into Prisma Cloud Enterprise. Configuration Resource ingestionis visible in the Asset Inventory for the onboarded account, but no alerts are being generated for theconfiguration assets in the account.Config policies are enabled in the Prisma Cloud Enterprise tenant, with those policies associated to existingalert rules. ROL statements on the investigate matching those policies return config resource resultssuccessfully.Why are no alerts being generated?

Options :

A : The public cloud account is not associated with an alert notification.

B : The public cloud account does not have audit trail ingestion enabled.

C : The public cloud account does not access to configuration resources.

D : The public cloud account is not associated with an alert rule.

Answer: D

Question 4

Which RQL query will help create a custom identity and access management (1AM) policy to alert onLambda functions that have permission to terminate EC2 instances?

Options :

A : iam from cloud.resource where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’lambda’AND source.cloud.resource.type = ’function’ AND dest.cloud.service.name = ’ec2’ AND action.name= ’ec2:TerminateInstances’

B : config from iam where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’ec2’ AND source.cloud.resource.type = ’instance’ AND dest.cloud.service.name = ’lambda’ AND action.name = ’ec2:TerminateInstances'

C : iam from cloud.resource where cloud.type equals ’AWS’ AND cloud.resource.type equals ’lambdafunction’ AND cloud.service.name = ’ec2’ AND action.name equals ’ec2:TerminateInstances’

D : config from iam where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’lambda’ ANDsource.cloud.resource.type = ’function’ AND dest.cloud.service.name = ’ec2’ AND action.name = ’ec2:TerminateInstances’

Answer: D

Question 5

In Prisma Cloud for Azure Net Effective Permissions Calculation, the following Azure permission levels aresupported by which three permissions? (Choose three).

Options :

A : Resources

B : Tenant

C : Subscription

D : Resource groups

E : Management Group

Answer: A,C,E